Is there support for Certificate Authentication in Swagger UI?

[geetmenon]

Is there support for Certificate Authentication in Swagger UI? If yes, could someone provide an example of enabling it in a solution using asp.net core 5 and Swashbuckle, or point me to a url which has a good example of the same.

[cihatsolak]

I hope I understood your question correctly. swagger supports certificate authentication. you can do it this way.

services.AddSwaggerGen(options =>
{
    options.AddSecurityDefinition("clientcertificate", new OpenApiSecurityScheme
    {
        Type = SecuritySchemeType.ApiKey,
        Name = "X-ARR-ClientCert",
        In = ParameterLocation.Header,
        Description = "Client Certificate Authentication",
    });

    options.OperationFilter<ClientCertificateOperationFilter>();
});

public class ClientCertificateOperationFilter : IOperationFilter
{
    public void Apply(OpenApiOperation operation, OperationFilterContext context)
    {
        var required = context.MethodInfo.GetCustomAttributes(true)
            .OfType<RequireClientCertificateAttribute>()
            .Any() ||
            context.ApiDescription.ActionDescriptor.EndpointMetadata
            .OfType<RequireClientCertificateAttribute>()
            .Any();

        if (required)
        {
            operation.Security.Add(new OpenApiSecurityRequirement
            {
                {
                    new OpenApiSecurityScheme
                    {
                        Reference = new OpenApiReference
                        {
                            Type = ReferenceType.SecurityScheme,
                            Id = "clientcertificate"
                        }
                    },
                    Array.Empty<string>()
                }
            });
        }
    }
}

[AttributeUsage(AttributeTargets.Method | AttributeTargets.Class, Inherited = false)]
public class RequireClientCertificateAttribute : Attribute
{
}